DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
cc 8.3 [DragonFly] Release/2019-02-22
kern.version: DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026

Loaded netgraph modules:
  ng_socket.ko  (legacy netgraph, NOT netgraph7)
  ng_iface.ko   (from sys/netgraph/iface/ng_iface.c, NOT sys/netgraph7/iface/ng_iface.c)

netgraph7 modules in /boot/kernel/: 0
netgraph7 compiled into kernel: NO (no NETGRAPH7 in X86_64_GENERIC)

Key finding: The loaded ng_iface.ko module is built from sys/netgraph/iface/ng_iface.c
(legacy netgraph tree), which ALREADY has the correct code (reads AF from mbuf).
The finding cites sys/netgraph7/iface/ng_iface.c which has the bug but is dead code.

Separate constructor bug: ng_iface nodes cannot be created on this guest because
if_attach() panics when called from netgraph's netisr context:
  "panic: try holding ifnet lock in netisr" (ng_eiface, same pattern)
  "panic: trying to free NULL pointer" (ng_iface, same root cause)

/dev/bpf* permissions: crw------- root wheel (root-only access)
Unprivileged user maxx (uid 1001) cannot access BPF.